The new legal framework will require meaningful adjustment by employers monitoring information created or processed by employees using corporate devices. Personal data shall be processed in a less intrusive manner and the employer must adopt...

An independent data protection supervisory authority is crucial to ensure legal certainty and effectiveness. The unusual design to the Brazilian Data Protection Authority raises questions about how independent it will be, which may impact free...

Consent is only one of the legal grounds for processing personal data and the European experience shows that using it as a standard can be misleading. It can be revoked at any time and has limitations, whereas other legal grounds may limit the...

M&A transactions in Brazil will have to undergo major changes to adjust to the LGPD. The Law will alter due diligences, the structure of deals and the negotiation of transaction documents. Costs may increase but ensuring compliance in all phases...